JP5327894B2 - Management server and terminal management method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a management server and a terminal management method therefor which can improve a security level by surely preventing even illegal file operations among users. <P>SOLUTION: A management server 20 comprises a table with which information indicating permission/non-permission of predetermined file processing for each file is registered for each user, determines whether a user of a file processing request is permitted to execute file processing on a file processing target file by referring to the table when receiving the file processing request from a client terminal 10, and permits the client terminal to execute the file processing when it is determined that the user of the file processing request is permitted to execute the file processing on the target file. <P>COPYRIGHT: (C)2012,JPO&amp;INPIT

Description

  The present invention relates to a management server and a terminal management method thereof, and more particularly to a technique for preventing unauthorized access to information assets (files).

  Conventionally, the importance of information security has been well known regardless of whether it is engaged in the IT industry, but the number of security incidents such as unauthorized access and information leakage has not shown a tendency to decrease. According to the 2009 Information Security Incident Survey Report (see Chapter 3, 3.1 Overview) (NPO Japan Network Security Association (Chapter 3, 3.1 Overview)), security incidents have increased since 2007. Continuing, it recorded a record high of 1,539 in 2009.

  Looking at the causes of information leaks that have a large social impact among security incidents, in the analysis according to the number of cases, “management errors”, “erroneous operations”, and “lost / stolen” account for over 80%. In addition, in the analysis by number of leaked persons, “management mistake”, “internal crime”, “unauthorized access”, and “unintended use” account for 80% or more.

  What we can see is that most information leaks are caused by human error. In other words, in order not to cause information leakage, it is necessary to have an environment and mechanism that does not cause information leakage as well as enlightenment activities that do not cause these human errors. In addition, the “cloud service”, which is attracting attention as a new service, has a high risk of information leakage due to the distributed storage of data outside the company.

  Generally, there is “access restriction” as a countermeasure for preventing human error. This restricts the user who operates the information asset, and types thereof include password authentication and biometric authentication. However, password authentication has a vulnerability called “spoofing” that uses another person's password to access information assets.

  On the other hand, in recent years, the necessity of a complete trace of a file has been recognized as a security tool, and there is a trace of information such as operation contents of a file, a logged-on user at that time, and the owner of the file. However, looking at recent security situations, this information alone is not sufficient for security. For example, it is possible for a malicious user to impersonate using a regular user account, and it is difficult to discover impersonation only by tracing the contents of a file operation or a logged-on user.

  As countermeasures against impersonation, the introduction of biometric authentication techniques represented by face authentication and fingerprint authentication is in progress. Since biometric authentication is a mechanism that uses personal features to authenticate, it cannot impersonate others. Currently, various authentication technologies such as face authentication, fingerprint authentication, iris authentication, etc. have appeared, but application examples of authentication technology are still applied to entry / exit restrictions and terminal / device usage restrictions, There is no case to apply to each information asset unit (file unit) subject to actual information leakage. Therefore, once an entry / exit, terminal, or device is authenticated, there is a risk of unauthorized access to information assets.

  As an information processing apparatus using conventional biometric authentication, for example, as described in Patent Document 1, there is a method of monitoring the usage status of a computer terminal and applying usage restrictions to the computer terminal according to the usage status. . That is, Patent Document 1 captures the face of the terminal user, compares the face image of the user who is permitted to log in to the pre-registered terminal, and the captured face image of the user, It is described that in the case of mismatch, the user's processing operation using the terminal is restricted.

JP 2008-097647 A

  In the authentication method of Patent Document 1, authentication is performed by comparing the face image of the terminal user with the face image of the user who is permitted to log in, and the use / non-permission of terminal operation is determined at the log-in stage. Therefore, it is not possible to eliminate unauthorized file operations between users who are permitted to log in.

  Specifically, the user security that should be originally should be “a user who wants to access a file = a user who can access a file” for a specific file. If this doesn't hold, you have to say that there is a security problem. In the method of Patent Document 1, since permission of terminal operation is determined at the login stage, a user who cannot log in cannot operate a specific file. Therefore, “a user who cannot log in = a user who cannot access a file” holds.

  However, in the case of only permission by login, “login permitted user = user who can access the file”. At this time, there is no problem when the login user and the user who wants to access the file match, but the problem remains that the user who does not want to access among the login-permitted users can access the specific file. That is, this corresponds to “an illegal operation on a file between users who are permitted to log in”, and an illegal file operation between users as described above cannot be excluded.

  An object of the present invention is to provide a management server and a terminal management method thereof that can reliably prevent unauthorized file operations between users and can further improve the security level.

The management server according to the present invention, there is provided a management server terminal transmitting the picture image of said captured images Yu over The co user is connected performs a predetermined file processing, for individual users A file processing management information table in which information indicating permission / non-permission of predetermined file processing is registered for each file, an image image management information table in which a user's image image is registered for each user, and from the terminal and file processing determining means for determining whether a user of the file processing demand is permitted file process by the target file in the file processing by referring to the file processing management information table when the file processing request, pre-outs image image The user image image transmitted from the terminal with reference to the management information table and the image image management information table. Image image determining means for determining whether or not the user's image image registered in the file matches, and the file processing determining means determines that the file processing request user is permitted to process the target file. It is, and, a file processing to said terminal when it is judged that the picture image of the user registered in the picture image management information table and the image image of Yoo chromatography the transmitted matches from the terminal by the picture image judging means A file processing permission means for permitting a file to be sent, and the terminal is a terminal that transmits a file attached to a mail, and the file processing management information table stores a mail for each target file for each user. Information for permitting / disallowing attachment is registered, and a file for the mail is sent from the terminal to the management server. At the time of attachment request, it is determined by the file processing determination means that the user of the file attachment request to the mail is permitted to attach the target file to the mail, and is transmitted from the terminal by the image image determination means The file processing permission means permits the terminal to attach the target file to the e-mail when it is determined that the user image registered and the user image registered in the image image management information table match. It is characterized by that.

The terminal management method according to the present invention is a terminal management method of a management server connected to a terminal that performs predetermined file processing and captures a user image and transmits the user image. There is a file processing management information table in which information indicating permission / non-permission of predetermined file processing for each file is registered for the user, and an image image management information table in which the user's image image is registered for each user. Then, the file processing determination means refers to the file processing management information table at the time of the file processing request from the terminal, and determines whether the file processing request user is allowed to perform file processing on the file to be processed and file processing determination step of, picture image determination means, a pre-outs image image management information table A picture image judgment step of judging whether the image image and matches the user the picture image of the user registered in the picture image management information table transmitted from the terminal to irradiation, the file processing enabling means, said file It is determined by the processing determining means that the file processing request user is permitted to perform file processing of the target file, and the image image of the user transmitted from the terminal by the image image determining means and the image image management see containing and a file processing permission step of permitting the file processing to said terminal when the picture image of the user registered in the information table is determined to match, the terminal includes a terminal for email attachments In the file processing management information table, for each user Information for permitting / disallowing attachment to an e-mail for each file is registered, and a user of a file attachment request to the e-mail in the file processing determination step when requesting file attachment from the terminal to the management server It is determined that the attachment of the target file to the mail is permitted, and the image of the user transmitted from the terminal in the image image determination step and the user registered in the image image management information table When it is determined that the image matches the image, the file processing permission step permits the terminal to attach the target file to the mail .

The program according to the present invention is a program of a management server to which a terminal that performs predetermined file processing and captures a user's image and transmits the user's image is connected to the management server. Means for registering information indicating permission / non-permission of predetermined file processing for each file for each user in the processing management table, and means for registering the user's image image in association with each user in the image image management information table; A file processing determination means for determining whether a file processing request user is permitted to perform file processing on a file processing target file by referring to the file processing management information table at the time of a file processing request from the terminal; image of the user transmitted from the terminal with reference to the previous outs picture image management information table Image image determination means for determining whether the image and the user image registered in the image image management information table match, and file processing of the target file for the user of the file processing request by the file processing determination means Is determined to be permitted, and it is determined by the image image determination means that the user image transmitted from the terminal and the user image registered in the image image management information table match. and file processing permission means for permitting the file processing to said terminal, is to function Rutotomoni, said terminal is a terminal for email attachments to individual users on the file processing management information table On the other hand, information to allow / disallow attachment to e-mail for each target file is registered. And when the file attachment request to the mail is requested from the terminal to the management server, the file processing determining means determines that the user of the file attachment request to the mail is permitted to attach the target file to the mail. And when it is determined by the image image determination means that the user image transmitted from the terminal and the user image registered in the image image management information table match, the file processing permission means The terminal is allowed to attach the target file to an e-mail .

  According to the present invention, since it is determined whether or not file processing is possible for each file based on information indicating permission / non-permission of file processing for the target file for each file for each user, the security level is further improved. It is possible to prevent unauthorized operation of files between users who are permitted to log in.

It is a block diagram which shows one Embodiment of this invention. It is a figure which shows an example of a file management operation information table. It is a figure which shows an example of a user image image management information table. It is a figure which shows an example of the log information table for operation tracking. It is explanatory drawing explaining the process sequence of the management server which concerns on this invention. It is a flowchart explaining operation | movement of the management server which concerns on this invention. It is a block diagram which shows other embodiment of this invention. It is a block diagram which shows other embodiment of this invention.

  Next, embodiments for carrying out the invention will be described in detail with reference to the drawings. The present invention provides a mechanism for realizing strong access restrictions and reducing human error by applying face authentication technology to individual information asset units (file units) and further to operation units for information assets. It is to provide. In addition, by using the operator's image (face image) as an operation record (log) to the information asset, the tracing accuracy of the operation history is improved and it is also used as a deterrent against unauthorized access.

  FIG. 1 is a block diagram showing a configuration of an embodiment of a system according to the present invention. In FIG. 1, a client terminal 10 is a terminal operated by a user, and is a terminal such as a personal computer that operates by program control. The client terminal 10 includes a Web camera 11 that captures an image (face image) of the operating user, a data transmission unit 13 that transmits data to the management server 20, a data reception unit 14 that receives information from the management server 20, and a management server 20 includes a file operation control unit 12 that controls file operations in response to permission / denial of file operations.

  The management server 20 operates under program control, and includes a data receiving unit 21 that receives data from the client terminal 10 and the data registration terminal 30, a data transmitting unit 22 that transmits authentication result data to the client terminal 10, and information from the client terminal 10. The file operation determination unit 23-1 and the image authentication processing unit 23-2 that determine whether or not the file operation is possible, the data registration unit 24 that receives the user registration data from the data registration terminal 30, the user registration data and the log information Including a database 25 and the like.

  The data registration terminal 30 is a terminal for registering user information input from a user or the like in the management server 20, and operates by program control. The data registration terminal 30 includes a data transmission unit 31 for transmitting user information to the management server 20. The user information includes information for permitting / rejecting file operations indicating which users can perform what operations on which files, user images, and the like, as will be described later. The management server 20 and the client terminal 10, and the management server 20 and the data registration terminal 30 are connected via a LAN, respectively, and data can be exchanged in real time.

  FIG. 2 is a diagram showing an example of file operation management information. When a user operates a file using the client terminal 10, the management server 20 determines whether or not a file operation can be performed on the target file based on the file operation management information shown in FIG. As shown in FIG. 2, “user ID”, “target file”, and “file operation (contents of file operation)” are registered in the file operation management information.

  Specifically, the contents (creation, deletion, update, reference, etc.) that the user can operate for each target file are registered for each user, and which user can perform what operation on which file Is registered. For example, user A can create / delete / update / reference the target file D: \ XXX.txt, but user B cannot access the target file D: \ XXXX.txt. The file operation management information shown in FIG. 2 is transmitted from the data registration terminal 30 to the management server 20 and registered in the database 25 in the management server 20 as a file operation management information table.

  FIG. 3 is a diagram showing an example of user image image management information. The user image image (user face image) is managed by the user image image management information shown in FIG. 3, and the “user ID” and the user “image image (face image)” registered in advance are associated with each user. It is registered. The user image image management information of FIG. 3 is also registered in advance as a user image image management information table from the data registration terminal 30 to the database 25 of the management server 20.

  FIG. 4 is a diagram showing an example of an output format of log information for operation tracking. Log information for operation tracking is output in the format of the log information table of FIG. As shown in FIG. 4, output items include “operation date”, “hour / minute / second”, “user ID”, “operation (operation content)”, “target file”, and the like. In addition, the image of the operating user is saved in the format of “year / month / day_hour / minute / second_operation file” in the item “image file”. Log information for operation tracking shown in FIG. 4 is stored in the database 25, and is read out from the database 25 when the user's file operation is tracked.

  Next, the operation of this embodiment will be described. FIG. 5 is an explanatory diagram for explaining the processing procedure of this embodiment, and FIG. 6 is a flowchart thereof. FIG. 5 shows a flow of a schematic processing procedure by the management server 20. In the present embodiment, a mechanism for permitting only a user registered in advance to operate a file and a mechanism for capturing an image at the time of the file operation are provided.

  First, as shown in FIG. 5, information for permitting / rejecting file operations on the target file for each user is registered in advance in the management server 20 from the data registration terminal 30 (step S101 in FIG. 6). Information for permitting / rejecting file operations on this file is determined by, for example, a user administrator who manages users, and determines which users can operate on which files. In addition, the information for permitting / denying file operations on a file may be, for example, a division of labor between a security administrator and a file administrator. Although only one client terminal 10 is shown in FIG. 1, a plurality of client terminals 10 may be connected to the management server 20.

  At this time, information for permitting / rejecting file operations on the target file for each user input from the data registration terminal 30 is transmitted to the management server 20 by the data transmission unit 31. The data receiving unit 21 of the management server 20 registers the data in the database 25 by the data registering unit 24 after receiving the data. In that case, it is registered in the database 25 in the format of the file operation management information shown in FIG. 2, and what operation can be performed on which file by which user is registered.

  Similarly, a user image (face image) is transmitted from the data registration terminal 30 to the management server 20 and registered in the database 25 (step S102). The user's image is registered in the format shown in FIG. 3, and “user ID” and “image image (face image)” are associated and registered for each user.

  Next, it is assumed that the operating user starts file access (that is, executes an operation on the file) using the client terminal 10 and tries to execute operations such as creation, deletion, update, and reference of the file. (Step S103). At that time, the image of the operating user (face image) is captured from the Web camera 11 installed in the client terminal 10 at the timing when the file operation is to be performed from the client terminal 10, and the captured image is selected as the operation target. The file name, user ID, and operation content are transmitted to the management server 20 via the data transmission unit 13 (step S104).

  At this time, since the acquired image image of the operating user is also used as an operation log, the data registration unit 24 stores it in the log information table of the database 25 in the format shown in FIG. 4 (step S105). In the management server 20, data from the client terminal 10 is received by the data receiving unit 21, and matches the information registered in advance in the database 25 by the file operation determining unit 23-1 and the image authentication processing unit 23-2. Is determined (step S106).

  Specifically, the file operation determination unit 23-1 refers to the file operation management information table (FIG. 2) registered in advance, and the user ID of the user who intends to operate the file has the file operation management information shown in FIG. Determine whether it is registered in the table. The file operation determination unit 23-1 determines to reject the file operation on the target file for a user who is not registered in the file operation management information table.

  In addition, when the user ID of the user who intends to operate the target file is registered in the file operation management information table, the file operation determination unit 23-1 refers to the file operation management information table and responds to the corresponding user. It is determined whether operations such as creation, deletion, update, and reference of the target file are permitted. For example, as shown in FIG. 2, it is understood that userA is permitted to operate on the target file and userB is not permitted to operate on the target file.

  On the other hand, the image authentication processing unit 23-2 refers to the user image image management information table of FIG. 3 in which the user ID registered in advance and the user's image image are registered in association with each other. It is determined whether the image of the user that has been registered matches the image of the user registered in advance.

  When it is determined that both the file operation determination unit 23-1 and the image authentication processing unit 23-2 match the information registered in advance, the operation permission information is transmitted from the data transmission unit 22 to the client terminal 10 ( Step S107). At that time, the file operation determination unit 23-1 registers the user who wants to operate the file in the file operation management information shown in FIG. 2, and permits the user who wants to operate the file to operate the target file. If it has been determined (for example, userA), it is determined as a match, and otherwise it is determined as a mismatch. Regardless of whether the file operation determining unit 23-1 and the image authentication processing unit 23-2 match or not, the user's image is registered in the log information table shown in FIG.

  If it is determined that the information registered in advance by either the file operation determination unit 23-1 or the image authentication processing unit 23-2 does not match, the management server 10 sends the operation rejection information to the data transmission unit 22. To the client terminal 10 (step S108).

  In the client terminal 10, after the permission / rejection information from the management server 20 is received by the data receiving unit 14, the file operation control unit 12 executes file operation permission / rejection (step S109). In other words, the file operation control unit 12 executes the file operation only when it is determined to match, and does not perform the file operation when it is determined that they do not match.

  In this embodiment, both the access restriction function and the trace function in units of files can be realized in one mechanism, and impersonation and unauthorized access can be prevented by using the user's image, and the operation trace work can be prevented. It becomes possible to improve accuracy and increase efficiency.

  In other words, the permission / denial of file operation is registered for each target file for each user in advance in the file operation management information table, and the permission / denial of file operation on the target file is determined based on the file operation management information. Therefore, unauthorized file operations from users who are not registered in the file operation management information can be prevented. In addition, since file operations are rejected even for users who are not allowed to perform file operations on the target file, only users who are permitted to perform file operations can perform file operations, which can further improve the security level. It becomes.

  At this time, for example, to a terminal as described in Patent Document 1 or the like in order to register operation permission / non-permission to the target file for each file for each user and restrict file operations in units of files. Compared with the method of determining permission / denial of file operation at the login stage, it is possible to prevent unauthorized file operations between users who are permitted to log in, and to further improve the security level.

  In addition, even if an attempt is made to perform a file operation with information of a legitimate user (such as a user ID) by impersonation, the file operation is rejected by the image image authentication of the operating user, so that illegal operation of the file due to impersonation can also be prevented.

  On the other hand, the log information is stored in the database 25 of the management server 20 in the format shown in FIG. 4. As the log information, “year / month / day”, “hour / minute / second”, “user ID”, In addition to “target file” and “operation content”, an image image (face image) of the operating user is registered as an “image file”. When a user, an administrator, or the like traces a user's file operation based on the log information, the log information is read from the database 25. At that time, by referring to the image of the operation user included in the log information, the specific operation of the operation user can be speeded up, so-called “spoofing” can be known, and the accuracy of the tracing operation can be improved.

  Next, another embodiment of the present invention will be described. The management server according to the present invention is not limited to the management of file operations as described above. For example, for a terminal having a mail function such as a PC or a mobile phone, control of an attached file to a mail, print control to a printer, etc. It can also be applied to management. FIG. 7 is a block diagram showing an embodiment in the case of performing attachment file control to a mail according to the present invention. In FIG. 7, the same parts as those in FIG.

  When performing attachment file control to mail as shown in FIG. 7, for example, when the operating user tries to attach a predetermined file to the mail from the terminal 40 having the attachment file control unit 42 to the mail such as a PC. And the image of the management server 20 are determined to match. Further, it is determined whether or not a file can be attached based on information indicating whether or not mail attachment is permitted for each file for each user registered in advance. The terminal 40 includes a camera 41 and a mail attachment control unit 42.

  A user image (face image) is registered in advance in the management server 20. This is the same as the management table of FIG. In addition, information indicating whether or not attachment to an email is permitted for each file is registered for each user. This is the same as registering file operation permission / denial information for each file for each user described in the file operation management table of FIG.

  Next, when the user attaches the target file to a mail from the terminal 40 and transmits it, the management server 20 provides information indicating whether or not the registered individual user is permitted to attach the mail for each file (management). Based on (table), it is determined whether attachment of the target file to the mail is permitted. Further, the user's face image captured by the camera 41 is transmitted from the terminal 40 to the management server 20, and the management server 20 compares the transmitted user's image image with the previously registered user's image image to determine a match. I do. In addition, when the user who requested the file attachment to the mail is not registered in the management table, naturally the attachment of the target file to the mail is rejected.

  The management server 20 is allowed to attach the target file to the mail, and when the user image transmitted from the terminal 40 matches the registered user image, the terminal 40 allows the terminal 40 to attach the target file to the mail. To do. As a result, only an attachment operation from a user who has permitted file attachment is permitted, so that information leakage by mail can be prevented. The method for determining permission / non-permission of mail attachment of the target file is the same as the method for determining permission / non-permission of file operation in the embodiment of FIG.

  FIG. 8 is a block diagram showing an embodiment in the case of managing print control of a target file by a printer according to the present invention. In FIG. 8, the same parts as those in FIG. When printing control to the printer 53 is performed as shown in FIG. 8, when the operating user tries to print a predetermined file from the terminal 50 having the control unit 52 to the printer such as a PC, the user image and the image are preliminarily stored. Judgment is made with the registered user image. Further, the management server 20 determines whether or not the file can be printed based on information indicating whether or not printing is permitted for each file for each user registered in advance. A terminal 50 such as a PC has a camera 51 that captures a user image.

  When performing printing control to the printer 53 as shown in FIG. 8, for example, when the operating user tries to print a predetermined file from a terminal 50 such as a PC having the printer control unit 52, the management server 20 displays the user image. Judgment is made between the image and the user image registered in advance. Further, the management server 20 determines whether or not the file can be printed based on information indicating whether or not printing is permitted for each file for each user registered in advance. The terminal 50 includes a camera 51 and a print control unit 52 for the printer 53.

  A user image (face image) is registered in advance in the management server 20. This is the same as the management table of FIG. Also, information indicating whether or not printing is permitted for each file for each user is registered. This is the same as registering file operation permission / non-permission information for each file for each user described in the management table of FIG.

  Next, when the user tries to print the target file from the terminal 50 with the printer 53, the management server 20 indicates information indicating whether to permit printing for each file for each user registered in advance ( It is determined whether printing of the target file is permitted based on the management table. In addition, the user's face image captured by the camera 51 is transmitted from the terminal 50 to the management server 20, and the management server 20 compares the transmitted user's image with a previously registered user's image to determine a match. I do. When the user who has requested the printing of the target file is not registered in the management table, it is determined that the printing of the target file is rejected.

  The management server 20 permits printing of the target file to the terminal 50 when printing of the target file is permitted and the user's image transmitted from the terminal 50 matches the registered user's image. As a result, only a printing operation from a user who has permitted printing is permitted, so that information leakage due to file printing can be prevented. The method for determining permission / non-permission of printing of the target file is the same as the method for determining permission / non-permission of file operation in the embodiment of FIG.

  The embodiment relating to the attachment file control to the mail and the embodiment relating to the printing control of the printer in FIG. 7 and FIG. 8 are “permitting / disallowing the file operation of the target file” with respect to the embodiment of FIGS. Is the difference between “permit / deny attachment of target file to email” or “permit / deny print of target file”, otherwise implementation of FIGS. 1 to 5 It is the same as the form. Further, both of the attachment file control to the mail and the printing control to the printer prevent the leakage of the target file due to an illegal operation and improve the security level.

  The management server of the above embodiment can be realized by hardware, but can also be realized by reading and executing a program for causing a computer to function as a management server from a computer-readable recording medium. In addition, the terminal management method of the above embodiment can be realized by hardware, but can also be realized by reading and executing a program for causing a computer to execute the method from a computer-readable recording medium.

  A part or all of the above embodiments can be described as in the following supplementary notes, but is not limited thereto.

(Supplementary Note 1) A management server connected to a terminal that performs predetermined file processing and captures a user image and transmits the user image.
A file processing management information table in which information indicating permission / non-permission of predetermined file processing is registered for each file for each user;
An image image management information table in which user image images are registered in association with each user;
A file processing determination unit that determines whether a file processing request user is allowed to perform file processing on a file processing target file by referring to the file processing management information table at the time of a file processing request from the terminal;
Image image determination means for determining whether the user image image transmitted from the terminal with reference to the user image image management information table matches the user image image registered in the image image management information table;
It is determined by the file processing determination means that the file processing request user is permitted to perform file processing of the target file, and the user image image transmitted from the terminal by the image image determination means and the image File processing permission means for permitting the terminal to perform file processing when it is determined that the image of the user registered in the image management information table matches.
A management server comprising:

  (Supplementary note 2) The management server according to supplementary note 1, wherein an image of the user transmitted from the terminal is registered as log information in a log information table of a database.

(Appendix 3) In the file processing management information table, information indicating permission / non-permission is registered for each type of file processing.
The file processing determination means refers to the file processing management information table when a certain type of file processing is requested from the terminal, and the user of the file processing request performs the certain type of file processing on the target file for file processing. Determine if it is allowed,
The file processing permission means allows the user who requested the file processing by the file processing determination means to permit the certain type of file processing of the target file, and the user transmitted from the terminal by the image image determination means 3. The management server according to appendix 1 or 2, wherein file processing is permitted to the terminal when it is determined that the image image of the user and the image image of the user registered in the image image management information table match.

  (Additional remark 4) The said terminal is a terminal which performs the file operation of the said object file, and the said file process management information table has the information which permits / disallows file operation for every object file with respect to each user. When the file operation request from the terminal to the management server is registered, it is determined by the file processing determination means that the file processing request user is permitted to process the target file, and the image determination When it is determined by the means that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means causes the terminal to perform a file operation on the target file. The management server according to appendix 1 or 2, wherein the management server is permitted.

  (Additional remark 5) The said terminal is a terminal which attaches and sends a file to an e-mail, and permits or denies attachment to an e-mail for each target file for each user in the file processing management information table. Information is registered, and when the file attachment request to the mail is requested from the terminal to the management server, the file processing determination means permits the user of the file attachment request to the mail to attach the target file to the mail And the file processing permission means when it is determined that the user image transmitted from the terminal by the image image determination means matches the user image registered in the image image management information table. Appendix 1 or 2, which allows the terminal to attach the target file to an email. Management server.

  (Appendix 6) The terminal is a terminal that controls file printing of a printer, and the file processing management information table registers information for permitting / disallowing printing for each target file for each user. The file processing determining unit determines that printing of the target file is permitted for the user of the file print request when the file is requested to be printed from the terminal to the management server, and the image image determining unit When it is determined that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission unit allows the terminal to print the target file. The management server according to appendix 1 or 2, characterized in that.

(Appendix 7) A terminal management method for a management server to which a terminal that performs predetermined file processing and captures a user image and transmits the user image is connected.
A file processing management information table in which information indicating permission / non-permission of predetermined file processing is registered for each file for each user;
An image image management information table in which user image images are associated and registered for each user;
A step of determining whether or not a user of the file processing request is permitted to perform file processing on a file processing target file by referring to the file processing management information table at the time of file processing request from the terminal; When,
The image image determination means determines whether the user image image transmitted from the terminal matches the user image image registered in the image image management information table with reference to the user image image management information table. Steps,
The file processing permitting unit determines that the file processing requesting unit permits the file processing requesting user to permit the file processing of the target file, and the image image determining unit transmits the user from the terminal. Permitting the terminal to perform file processing when it is determined that the image image of the user matches the image image of the user registered in the image image management information table;
The terminal management method characterized by including.

  (Supplementary note 8) The terminal management method according to supplementary note 7, wherein the image of the user transmitted from the terminal is registered as log information in a log information table of a database.

(Supplementary Note 9) In the file processing management information table, information indicating permission / non-permission is registered for each type of file processing.
The file processing determination means refers to the file processing management information table when a certain type of file processing is requested from the terminal, and the user of the file processing request performs the certain type of file processing on the target file for file processing. Determine if it is allowed,
The file processing permission means allows the user who requested the file processing by the file processing determination means to permit the certain type of file processing of the target file, and the user transmitted from the terminal by the image image determination means 9. The terminal management method according to appendix 7 or 8, wherein the file processing is permitted to the terminal when it is determined that the image image of the user and the user image registered in the image image management information table match.

  (Additional remark 10) The said terminal is a terminal which performs the file operation of the said object file, and the said file processing management information table has the information which permits / disallows file operation for every object file with respect to each user. When the file operation request from the terminal to the management server is registered, it is determined by the file processing determination means that the file processing request user is permitted to process the target file, and the image determination When it is determined by the means that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means causes the terminal to perform a file operation on the target file. 9. The terminal management method according to appendix 7 or 8, wherein the terminal management method is permitted.

  (Additional remark 11) The said terminal is a terminal which attaches and sends a file to an e-mail, and the file processing management information table permits / disallows attachment to an e-mail for each target file for each user. Information is registered, and when the file attachment request to the mail is requested from the terminal to the management server, the file processing determination means permits the user of the file attachment request to the mail to attach the target file to the mail And the file processing permission means when it is determined that the user image transmitted from the terminal by the image image determination means matches the user image registered in the image image management information table. Appendix 7 or 8, which allows the terminal to attach the target file to an e-mail Terminal management method of the placement.

  (Supplementary Note 12) The terminal is a terminal that controls file printing of a printer, and the file processing management information table registers information for permitting / disallowing printing for each target file for each user. The file processing determining unit determines that printing of the target file is permitted for the user of the file print request when the file is requested to be printed from the terminal to the management server, and the image image determining unit When it is determined that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission unit allows the terminal to print the target file. The terminal management method according to appendix 7 or 8, characterized in that.

(Supplementary note 13) A program of a management server to which a terminal for performing predetermined file processing and capturing a user image and transmitting the user image is connected.
The management server
Means for registering information indicating permission / non-permission of predetermined file processing for each file for each user in the file processing management table;
Means for associating and registering a user image for each user in the image image management information table;
A file processing determination unit that determines whether a file processing request user is allowed to perform file processing on a file processing target file by referring to the file processing management information table at the time of a file processing request from the terminal;
Image image determination means for determining whether the user image image transmitted from the terminal with reference to the user image image management information table matches the user image image registered in the image image management information table;
It is determined by the file processing determination means that the file processing request user is permitted to perform file processing of the target file, and the user image image transmitted from the terminal by the image image determination means and the image File processing permission means for permitting the terminal to perform file processing when it is determined that the image of the user registered in the image management information table matches.
Program to make it function.

  (Supplementary note 14) The program according to supplementary note 13, wherein the user's image transmitted from the terminal is registered as log information in a log information table of a database.

(Supplementary note 15) In the file processing management information table, information indicating permission / non-permission is registered for each type of file processing.
The file processing determination means refers to the file processing management information table when a certain type of file processing is requested from the terminal, and the user of the file processing request performs the certain type of file processing on the target file for file processing. Determine if it is allowed,
The file processing permission means allows the user who requested the file processing by the file processing determination means to permit the certain type of file processing of the target file, and the user transmitted from the terminal by the image image determination means 15. The program according to appendix 13 or 14, wherein the file processing is permitted to the terminal when it is determined that the image image of the user matches the user image image registered in the image image management information table.

  (Supplementary Note 16) The terminal is a terminal that performs file operations on the target file, and the file processing management information table includes information for allowing / disallowing file operations for each target file for each user. When the file operation request from the terminal to the management server is registered, it is determined by the file processing determination means that the file processing request user is permitted to process the target file, and the image determination When it is determined by the means that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means causes the terminal to perform a file operation on the target file. 15. The program according to appendix 13 or 14, wherein the program is permitted.

  (Supplementary Note 17) The terminal is a terminal that attaches a file to a mail and transmits the file, and the file processing management information table permits / disallows attachment to the mail for each target file for each user. Information is registered, and when the file attachment request to the mail is requested from the terminal to the management server, the file processing determination means permits the user of the file attachment request to the mail to attach the target file to the mail And the file processing permission means when it is determined that the user image transmitted from the terminal by the image image determination means matches the user image registered in the image image management information table. Appendix 13 or 1 that allows the terminal to attach the target file to an e-mail The program according to.

  (Supplementary Note 18) The terminal is a terminal that controls file printing of a printer. In the file processing management information table, information for permitting / denying printing for each target file for each user is registered. The file processing determining unit determines that printing of the target file is permitted for the user of the file print request when the file is requested to be printed from the terminal to the management server, and the image image determining unit When it is determined that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission unit allows the terminal to print the target file. 15. The program according to appendix 13 or 14, characterized by:

DESCRIPTION OF SYMBOLS 10 Client terminal 11 Web camera 12 File operation control part 13 Data transmission part 14 Data reception part 20 Management server 21 Data reception part 22 Data transmission part 23-1 File operation judgment part 23-2 Image authentication process part 24 Data registration part 25 Database 30 Data registration terminal 31 Data transmission unit 40, 50 Terminal 41, 51 Camera 42 File attachment control unit 52 Printer print control unit 53 Printer

Claims (7)

A management server connected to a terminal for performing predetermined file processing and capturing a user image and transmitting the user image;
A file processing management information table in which information indicating permission / non-permission of predetermined file processing is registered for each file for each user;
An image image management information table in which user image images are registered in association with each user;
A file processing determination unit that determines whether a file processing request user is allowed to perform file processing on a file processing target file by referring to the file processing management information table at the time of a file processing request from the terminal;
A picture image determining means for determining whether the picture image of the user that is with reference to pre-outs image image management information table registered in the picture image management information table and the image image of the user transmitted from the terminal matches ,
It is determined by the file processing determination means that the file processing request user is permitted to perform file processing of the target file, and the user image image transmitted from the terminal by the image image determination means and the image File processing permission means for permitting the terminal to perform file processing when it is determined that the image of the user registered in the image management information table matches.
Equipped with a,
The terminal is a terminal that attaches a file to an e-mail and transmits the file. In the file processing management information table, information for permitting / disallowing attachment to the e-mail for each target file is registered for each user. , When the file attachment request to the mail is requested from the terminal to the management server, it is determined that attachment of the target file to the mail is permitted to the user of the file attachment request to the mail by the file processing determination unit, In addition, when it is determined by the image image determination means that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means A management server that permits attachment of the target file to a mail .   The management server according to claim 1, wherein the image of the user transmitted from the terminal is registered as log information in a log information table of a database. In the file processing management information table, information indicating permission / non-permission is registered for each type of file processing,
The file processing determination means refers to the file processing management information table when a certain type of file processing is requested from the terminal, and the user of the file processing request performs the certain type of file processing on the target file for file processing. Determine if it is allowed,
The file processing permission means allows the user who requested the file processing by the file processing determination means to permit the certain type of file processing of the target file, and the user transmitted from the terminal by the image image determination means 3. The management server according to claim 1, wherein file processing is permitted to the terminal when it is determined that the image image of the user matches the image image of the user registered in the image image management information table. The terminal is also a terminal that performs a file operation of the target file, and in the file processing management information table, information for permitting / disallowing a file operation for each target file for each user is registered, When the file operation request from the terminal to the management server is determined by the file processing determination unit that the file processing request user is permitted to perform file processing of the target file, and the image image determination unit When it is determined that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means permits the terminal to perform a file operation on the target file. The management server according to claim 1 or 2, characterized by the above. The terminal is also a terminal that controls file printing of a printer. In the file processing management information table, information for permitting / denying printing for each target file for each user is registered, and the terminal When the file print request is sent from the terminal to the management server, it is determined by the file processing determination means that the user of the file print request is permitted to print the target file, and is transmitted from the terminal by the image image determination means. The file processing permission means permits the terminal to print the target file when it is determined that the user image registered and the user image registered in the image image management information table match. The management server according to claim 1 or 2. A terminal management method for a management server to which a terminal for performing predetermined file processing and capturing a user image and transmitting the user image is connected.
A file processing management information table in which information indicating permission / non-permission of predetermined file processing is registered for each file for each user;
An image image management information table in which user image images are associated and registered for each user;
File processing determination unit, the file is determined whether the file processing demand user by referring to the file processing management information table when the file processing request from the terminal is permitted file process by the target file in the file processing A process determination step;
Determination image image determination unit, whether before and graphic images of users registered in the picture image management information table and the image image of the user transmitted outs with reference to image image management information table from the terminal matches An image determination step to perform,
The file processing permitting unit determines that the file processing requesting unit permits the file processing requesting user to permit the file processing of the target file, and the image image determining unit transmits the user from the terminal. A file processing permission step for allowing the terminal to perform file processing when it is determined that the image image of the user and the image image of the user registered in the image image management information table match.
Only including,
The terminal is a terminal that attaches a file to an e-mail and transmits the file. In the file processing management information table, information for permitting / disallowing attachment to the e-mail for each target file is registered for each user. , When the file attachment request to the mail is requested from the terminal to the management server, it is determined that attachment of the target file to the mail is permitted for the user of the file attachment request to the mail in the file processing determination step, In addition, when it is determined in the image image determination step that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission step includes the terminal terminal tube and permits the attachment of the target file to the email Method. A program of a management server to which a terminal for performing predetermined file processing and capturing a user image and transmitting the user image is connected,
The management server
Means for registering information indicating permission / non-permission of predetermined file processing for each file for each user in the file processing management table;
Means for associating and registering a user image for each user in the image image management information table;
A file processing determination unit that determines whether a file processing request user is allowed to perform file processing on a file processing target file by referring to the file processing management information table at the time of a file processing request from the terminal;
A picture image determining means for determining whether the picture image of the user that is with reference to pre-outs image image management information table registered in the picture image management information table and the image image of the user transmitted from the terminal matches ,
It is determined by the file processing determination means that the file processing request user is permitted to perform file processing of the target file, and the user image image transmitted from the terminal by the image image determination means and the image File processing permission means for permitting the terminal to perform file processing when it is determined that the image of the user registered in the image management information table matches.
And it is made to function Rutotomoni,
The terminal is a terminal that attaches a file to an e-mail and transmits the file. In the file processing management information table, information for permitting / disallowing attachment to the e-mail for each target file is registered for each user. , When the file attachment request to the mail is requested from the terminal to the management server, it is determined that attachment of the target file to the mail is permitted to the user of the file attachment request to the mail by the file processing determination unit, In addition, when it is determined by the image image determination means that the user image transmitted from the terminal matches the user image registered in the image image management information table, the file processing permission means Allowing the attachment of the target file to a mail .